WHAT DOES THE SECURITY RULE DEMAND?
A. The HIPAA Security Rule sets safeguards for data systems and networks that store, process or transmit PHI. The Rule follows the best security practices used in industry and government. Administrative safeguards include auditing computers for signs of misuse, reminding employees to follow security rules, and having a disaster recovery plan. Physical precautions include posting security guards at building entrances, logging off, and placing servers in locked rooms. Technical safeguards are measures such as using strong passwords and encrypting transmitted data. Each entity’s information technology group manages many of these safeguards.
